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I CLAIM: 

1. In an information stream associated with deliverable published 
software from a software publisher to a customer, an arrangement for software 
protection comprising a personalization, said personalization incorporated into the 

5 information stream by the software publisher and containing pre-existing personal 
information fundamentally related to the customer. 

2. The arrangement as in claim 1, wherein the deliverable published 
software is intended to execute on a plurality of computers, and wherein said 
personalization is not fundamentally related to any specific computer of the plurality. 

10 3. The arrangement as in claim 1, wherein the deliverable published 

software is intended to execute on a plurality of computers, each of the plurality of 
computers having a configuration, and wherein said personalization is not 
fundamentally related to any specific configuration. 

4. The arrangement as in claim 1, wherein the deliverable published 
15 software is intended to execute on computers belonging to a class of computer, and 

wherein the deliverable published software executes in substantially identical 
functional form on substantially all computers of the class of computer. 

5. The arrangement as in claim 1, wherein said personalization is not 
associated with, and does activate, any usage restriction on the deliverable published 

20 software. 

6. The arrangement as in claim 1 , wherein said personalization does not 
have a fixed address within the information stream. 
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7. The arrangement as in claim 1, wherein said personalization does not 
have a fixed extent within the information stream. 

8. The arrangement as in claim 1, wherein said personalization is 
authenticated. 

5 9. The arrangement as in claim 8, wherein said personahzation is in an 

encrypted form within the information stream. 

10. The arrangement as in claim 1, wherein the inf3rmation stream 
contains at least one executable module operative to displaying at least part of said 
personalization. 

10 11. The arrangement as in claim 1, wherein the information stream 

contains at least one executable module, and wherein said personalization is contained 
within said at least one executable module. 

12. The arrangement as in claim 1, further comprising a personalization 
validation module operative to validating a personahzation. 

15 13. The arrangement as in claim 12, wherein said personalization 

verification module is further operative to validating an output file. 

14. The arrangement as in claim 12, wherein the information stream 
contains at least one executable module, and wherein said personalization verification 
module is further operative to validating said at least one executable module. 

20 15. The arrangement as in claim 12, wherein said personalization 

validation module is further operative, upon not detecting a valid personalization, to 
initiate an action included in the group containing: 



84 

(a) program termination; 

(b) operating the software in a demonstration mode; and 

(c) operating the software in a restricted mode. 

16. The arrangement as in claim 1, wherein the information stream 
contains at least one executable module having an authentication, and wherein said 
executable module executes in a secure computer environment operative to validating 
said authentication. 

17. The arrangement as in claim 1, wherein at least part of the deliverable 
pubhshed software is written in the Java language. 

1 8. The arrangement as in claim 17, wherein at least part of the deliverable 
published software is contained in a Java archive. 

19. The arrangement as in claim 18, wherein said Java archive is signed 
with an archive signature. 

20. The arrangement as in claim 16, wherein said secure computer 
environment is operative to executing Java software. 

21. The arrangement as in claim 12, wherein said personalization is in an 
encrypted form within the information stream, and wherein said personaUzation 
vaUdation module is further operative to decrypting said encrypted form. 

22. The arrangement as in claim 21, wherein said encrypted form is 
according to a public key cryptosystem having a public key, and wherein said 
personahzation validation module has access to said public key. 
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23. The arrangement as in claim 1, wherein the information stream 
contains at least one executable module operative to writing an output file containing 
information derived from said personalization. 

24. A method for protecting published software ordered by a customer, the 
method comprising the steps of: 

(a) obtaining pre-existing personal information fiindamentally related to 
the customer; 

(b) producing, from said pre-existing personal information fundamentally 
related to the customer, a personal information module; and 

(c) producing an executable module deriving at least in part from said 
personal information module and incorporating said pre-existing 
personal information fundamentally related to the customer. 

25 . The method as in claim 24, further comprising the steps of: 

(d) authenticating said personal information module; and 

(e) providing a personalization vaUdation module, from which derives at 
least in part said executable module. 

26. The method as in claim 24, further comprising the steps of: 

(d) incorporating said executable module within a Java archive; and 

(e) authenticating said Java archive with an archive signature. 

27. The method as in claim 25, further comprising the steps of: 

(f) incorporating said executable module within a Java archive; and 

(g) authenticating said Java archive with an archive signature. 
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28. A system for protecting published software ordered by a customer, the 
system comprising: 

(a) a personal information collector for collecting pre-existing personal 
information fundamentally related to the customer; 

(b) a personalization compiler, for producing, from said pre-existing 
personal information fundamentally related to the customer, a 
personalization module; and 

(c) an executable module builder, for producing deliverable published 
software containing said pre-existing personal information 
fundamentally related to the customer and derived at least in part fi-om 
said personalization module. 



